Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: /NjM1OOwr78ew7MB4DbYnZWQWuM/2TqdnvDt3HL9zUU=
Subject key identifier: 37:E1:D3:50:3E:A1:56:BF:7B:D3:FF:DB:36:62:8A:7E:9A:12:4F:A1
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019FA93DE14C3108C6292B13E877264452AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 1A2A
Signing time: Tue 28 Jul 2026 15:00:32 +0000
Manifest this update: Tue 28 Jul 2026 15:00:32 +0000
Manifest next update: Wed 29 Jul 2026 15:00:32 +0000
Files and hashes: 1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
6: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
7: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
8: SaQLJTN3Tu68cjM5ZHbz4FW_mpg.roa (hash: WsziI7VNkNBzfhBKLzBNR8KU16oQ4434je9QUJEHNAU=)
9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: yA7PeHxwVKvNTmu7RYZbIfuJ+yr0mBvahp0m8ghL3I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:e1:4c:31:08:c6:29:2b:13:e8:77:26:44:52:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jul 28 15:00:32 2026 GMT
Not After : Jul 29 15:00:32 2026 GMT
Subject: CN=37e1d3503ea156bf7bd3ffdb36628a7e9a124fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:2a:6f:be:6e:d7:6f:d4:98:d2:de:12:8a:
cb:d8:0e:a1:42:0b:a1:18:7d:18:1d:c2:27:5f:de:
50:b0:3b:0f:32:a5:5e:bb:7f:17:01:03:65:e3:48:
0b:17:b2:24:a6:10:30:bb:8a:0a:45:43:38:87:97:
6f:66:86:28:7a:20:c7:e7:88:35:34:37:a1:67:8d:
bd:59:ba:04:67:62:c4:2f:76:d3:63:cc:ae:15:56:
88:99:67:42:2c:99:1b:3b:3d:84:ce:0a:aa:a5:1d:
e1:d0:45:43:19:ff:80:a4:c3:e9:50:7a:79:9f:26:
16:70:7f:68:ee:d8:d1:01:2b:0e:38:c3:d5:c5:ff:
3a:a5:3d:98:83:98:86:b3:4c:71:95:a4:da:d7:e9:
c7:6f:c3:1f:86:4e:e3:ab:61:61:34:f8:fc:74:a1:
03:dd:d2:be:4e:7a:82:e2:b1:e3:7e:38:e3:f6:2f:
fc:36:63:31:cd:6c:d1:b5:06:6d:e7:98:62:15:6d:
f7:8d:e6:2f:b9:b6:e1:e3:b3:29:31:48:f9:d6:1a:
2b:19:e2:18:99:01:e7:b9:ae:fb:ce:a8:a4:a8:d1:
f8:b4:d3:bf:e7:de:8e:75:b5:61:0e:09:d6:4d:08:
c1:2d:91:53:f5:6a:33:0f:d7:20:2d:a3:4a:f4:50:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:D3:50:3E:A1:56:BF:7B:D3:FF:DB:36:62:8A:7E:9A:12:4F:A1
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9d:22:50:ab:82:73:e0:e2:26:24:8a:4a:cf:8b:2e:49:84:
34:62:32:53:2e:f1:c7:b9:2a:ee:6d:78:4e:f5:c1:67:10:a8:
78:97:3f:56:b8:bc:a3:9b:b4:d7:ef:f9:48:71:6b:92:84:c4:
18:44:30:a8:af:c3:80:b3:d5:cf:d0:50:f3:0e:48:4b:72:33:
63:6b:e5:ea:1b:c7:29:4e:c4:a3:1a:11:28:25:a3:a0:6c:38:
16:45:23:b6:4d:90:54:f5:b6:e7:09:9f:b0:31:3d:ab:f9:77:
2a:fc:98:c0:58:9f:3a:d4:d2:7e:b3:6f:0d:10:4c:53:a2:fd:
62:81:ae:39:91:ad:c6:45:04:a3:11:f6:78:6a:50:0e:42:f5:
aa:a5:99:2c:a8:7a:7f:6c:b5:71:ce:15:c9:78:49:18:09:27:
6c:cf:58:08:83:c8:45:30:7d:2e:82:3a:9c:db:1b:ef:b6:cf:
fa:fd:05:c0:ae:49:f1:35:75:ef:a5:b9:35:58:92:37:0e:09:
1d:7a:7a:d9:26:7d:c6:5a:fb:c2:e6:b9:92:a5:6e:4a:e3:d1:
59:27:e2:43:a6:ef:37:0a:f2:72:06:75:71:a9:ed:a4:51:6b:
20:ad:35:82:00:68:6d:3f:81:62:1d:e1:da:b6:ca:91:0b:2d:
36:88:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:21 2026 by rpki-client